Thanks for your good explanation. I think I understand the problem. Currently, the PGT is sent to a web page and this web page calls a javascript file with the PGT in the URL. So, this is very bad.
Yes, I think we have an implementation of the cas client in our java application. I will try to work on it. Best regards, Matthew -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
